Gemalto CEO: HCE Not Secure for EMV Payments Unless Tokens Stored on Secure Elements or TEE

France-based vendor Gemalto Thursday confirmed its growth projections for 2014 and its longer-term forecast for 2017, despite the recent announcements of support for host-card emulation by Visa and MasterCard Worldwide.

Gemalto, the world’s largest smart card supplier and also the largest trusted service manager, has much to lose if pure host-card emulation, or HCE, takes off. It would enable banks and other service providers to avoid putting their applications on NFC SIMs, like the ones Gemalto supplies by the millions to mobile operators; or to require the hiring of a TSM to manage those applets over the air on the SIMs or other secure elements. 

Gemalto CEO Olivier Piou, while he questioned the inherent security of HCE for EMV payments, sought to put a positive face on the growing interest in the technology, in comments to financial analysts Thursday, following release of the company’s fourth quarter and year-end results. 

Among other things, HCE represents an endorsement of NFC by “all the main players of this ecosystem” for NFC, including Visa, MasterCard and Google, said Piou, who added that HCE would add momentum to the deployment of contactless point-of-sale terminals by merchants. In addition, he acknowledged that HCE enables easier development of applications for use with NFC phones, compared with secure elements. 

Some major telcos, including the Isis joint venture, have been using similar talking points, especially since Visa and MasterCard made their HCE announcements Feb. 19. 

But Piou, like the mobile operators, is taking a position on security that doesn’t quite match that of Visa and MasterCard or to jibe with the strict definition of HCE. Gemalto and the telcos are arguing that HCE is suited for such low-security applications as loyalty and couponing, not for open-loop payment. 

In this article: 

Words

3,500 

Among Topics Covered:

  • Gemalto CEO’s Olivier Piou’s contention that EMV tokens for HCE can't be secure in phone memory
  • Position of Visa and MasterCard on security of tokens and HCE
  • Piou: Decision on HCE security belongs to banks
  • Gemalto’s year-end revenue and profit report and multiyear goals
  • Review of hybrid approach to putting tokens on secure elements for cloud-based NFC payments
  • Oberthur’s take on HCE security
  • Isis’ view of HCE
  • Piou’s comments on Gemalto’s MCX contract and response to question about role vis-à-vis Paydiant 

Sources Quoted: 

Olivier Piou, CEO, Gemalto
Cédric Collomb, managing director, telecom, Oberthur Technologies
Scott Mulloy, CTO, Isis
Jorn Lambert, group executive, digital convergence, MasterCard 

Among companies and organizations mentioned:

Gemalto
Visa
MasterCard
Isis
Oberthur
MCX
Paydiant 

This is premium content from NFC Times.

Read Full Article 

© NFC Times and Forthwrite Media. NFC Times content cannot be copied or distributed without the express permission of the publisher.

HEADLINE NEWS

Boston Transit Authority Makes Aggressive Move to Eliminate Cash in Planned Fare-Collection System

NFC TIMES EXCLUSIVE Insight – The Massachusetts Bay Transportation Authority, or MBTA, in Boston plans to completely do away with cash fare payments on its various transport modes when it rolls out its massive new fare-collection system, an MBTA official told attendees during a recent virtual conference.

Israel Launches Nationwide Mobile-Ticketing Scheme; Moovit, Others Provide Apps

NFC TIMES Exclusive Insight – Israel this week launched a nationwide mobile-ticketing system, enabling riders to pay for trips on buses and later on railways, with the charges assessed at the end of each month.

In-Depth: Networks Developing New Uses for SoftPOS, Though Questions Remain about Interoperability and Costs of Technology

NFC TIMES Exclusive Insight – While the idea of letting merchants use their own NFC-enabled smartphones and tablets as acceptance devices to take contactless EMV payments is still getting off the ground, some major payments networks are already working on expanding the technology to enable consumers to tap their own devices to pay.

Planned Account-Based Ticketing Project Remains on Track in Queensland; Expected to Give Customers More Ways to Pay

NFC TIMES Exclusive Insight – The new account-based ticketing system under development for the Australian state of Queensland remains on track and on budget to be fully rolled out by 2022, despite the challenges of working through the Covid-19 pandemic, Martin Bradshaw, project head and general manager for passenger transport strategy and technology for transit agency TransLink, told NFC Times through a spokesman.

Insight: Taiwan’s Dominant Fare-Collection Service Struggles to Stay Competitive in Changing E-Payments Landscape

NFC TIMES Exclusive – EasyCard Corp. remains the dominant contactless stored-value card in Taiwan, boasting of market shares above 70% in transit fare payments and retail transactions nationally amid competition from three other contactless closed-loop cards that vie for transit and low-value retail transactions across the island nation.

In-Depth: California Transport Group Launches Mobile Ticketing, Plans MaaS Rollout

NFC TIMES Exclusive Insight – Officials in California’s Central Valley have launched an app that enables users to buy mobile tickets for bus and rail rides with seven mostly small public transit agencies, with plans to expand to ticketing for electronic car and bike sharing, along with on-demand ride-sharing and van-pool services.

UPDATED: Google Pay Launches with Fintechs in 10 New Countries, as Search Giant Unveils Revamped App; Deeper Move into Financial Services in U.S.

Nov 19 2020

NFC TIMES Exclusive Insight – Google Pay has added its first new countries in 18 months, all of them in continental Europe and all counting digital banks and other fintechs as the vast majority of the issuers across the 10 new markets.

Transport for London Prepares for Major Fare-Collection System Contract

Nov 18 2020

NFC TIMES Exclusive Insight – Transport for London, which runs the largest open-loop fare payments system globally, has issued a notice that it is preparing to seek proposals for a major upgrade of its revenue-collection system.

Visa and Mastercard See Continued Growth in Contactless Usage

NFC TIMES Exclusive Insight – Both Visa and Mastercard say contactless transactions made up a growing share of all face-to-face transactions for cards and other credentials bearing their brands during the last fiscal quarter, crediting in part an increasing aversion to cash by consumers because of the Covid-19 pandemic. Contactless usage rates, however, had been increasing by nearly the same rates before the pandemic.

Apple Pay Enables Ventra Closed-Loop Fare Card in Chicago after Long Delay

NFC TIMES Exclusive Insight – Apple has finally made good on plans to enable fare payments through Apple Pay with the closed-loop Ventra card from the Chicago Transit Authority, or CTA, the latest major closed-loop card the tech giant has enabled in recent months.

Visa Rolls Out SoftPOS technology as It Seeks to Promote Acceptance of Contactless by More Small and Micro-Merchants

NFC TIMES Exclusive Insight -  Visa is rolling out what it calls “Tap to Phone” technology to 15 global markets, as it seeks to enable millions of small and micro-merchants that now mainly take cash to also accept contactless EMV credit and debit cards and credentials on NFC devices.

Trip-Planning Apps Moovit and Transit Enable Ticketing and Payments for Another Transit Agency

NFC TIMES Exclusive Insight – Multimodal trip-planning apps Moovit and Transit have introduced ticketing and payments in their apps for another North American transit agency, following an emerging trend for trip-planning apps to enable users to plan, book and pay for their rides all in one place. The app providers are offering the extra service as they seek ways to give users a better mobility-as-a-service experience.